Automatically closing reported emails

How to set up rules to automatically close reported emails cases

You are able to set up rules in CultureAI, that automate the process of triaging potential phishing reports from your employees.

For example, if employees often report your HR newsletter as phishing, you can set a rule that will automatically close those reports so you don't need to manually do so.

Steps

  1. Login to your CultureAI admin account
  2. Click on the settings cog at the top of dashboard
  3. Clicking into "Triage Settings" along the side bar
  4. Click the "Manage Rules button"
  5. A new page will open where you can set up some rules, click the "Add Rule" button
  6. A new window will open where you can configure your rule
  7. Choose a name for your rule
  8. Select the field you'd like the rule to based off, you can choose between;
    Sender domain
    Sender email address
    Subject
  9. Next, choose the match type. You can choose between;
    Exact match (Only data that matches your input exactly will be included in the rule)
    Partial match (If the data partially matches, it will be included in the rule)
    Starts with
    Ends with
    Regex
  10. Fill out what you'd like the rule to match against
  11. When you're happy with your rule, click "Save"

Conditions vs New Rules

When you create a triage rule, you can choose to have one rule with several conditions inside it, or separate rules.

One rule with conditions inside it

CultureAI will look at the conditions you set, and look for emails that match all the conditions in the reported email. Setting one rule with different conditions inside it creates an AND statement.

For example, if you set up a rule like below, it would only auto-triage emails that meet all of those conditions. Only emails that are both from the email selected and have a match for the subject line will be triaged.

Separate rules

Setting separate rules creates an IF statement. CultureAI will look for any conditions you have in your different rules and triage any reports that match at least one of the rules you've set.

If you create a rule like the example below, reports that meet any of the conditions will be auto-triaged